again this is a client issue where the device does not have the full trust chain installed. There is nothing to do on the CPPM side except make sure you have included the full chain on the mobile device if you onboarded them. Some certs have more than one intermediate certs so you will need to make sure you include all of them.